East Africa's digital economy is experiencing rapid growth, driven by mobile money, digital banking, e-commerce, cloud computing, and connected public services. Kenya is at the forefront of this transformation, with mobile money deeply embedded in the economy and businesses and public institutions rapidly digitizing their operations and services. This growth has created new opportunities for people and businesses, but it also poses significant challenges. As the region becomes more connected, it is also becoming a more attractive target for cybercriminals.
The scale of the threat is becoming harder to ignore, with Kenya recording more than 46,000 distributed denial-of-service attacks during the first half of 2025, according to the INTERPOL African Cyberthreat Assessment Report 2026. Telecommunications infrastructure was among the sectors most targeted, and the country also featured prominently in phishing detections. Government and ICT infrastructure faced hundreds of millions of intrusion attempts, highlighting the need for robust cybersecurity measures to protect digital infrastructure and ensure business continuity.
East Africa's cyber risks are evolving alongside its digital economy, with the region's dependence on mobile payments, digital identities, and connected infrastructure creating new opportunities for attackers to exploit. SIM-swap fraud is a clear example, with Kenya recording a 327 percent increase in 2025, involving more than 123,000 fraudulent SIMs and estimated losses of $3.8 million. This type of fraud can expose much more than a single device or account, making digital identity protection an increasingly important part of financial inclusion.
Artificial intelligence is adding another dimension to the challenge, with cybercriminals using AI to make attacks more convincing and easier to scale. AI-enabled phishing, personalized scams, fraudulent communications, and deepfakes can make it increasingly difficult for individuals and organizations to distinguish genuine interactions from malicious ones. Traditional warning signs are becoming less reliable when attackers can generate convincing content at speed, highlighting the need for new approaches to cybersecurity.
The risk extends beyond financial crime, with critical infrastructure becoming increasingly digitized and connecting essential services to networks that must be protected against disruption. The cyber incident that affected Uganda's electricity utility last year demonstrated the potential consequences when digital systems supporting essential services are compromised. As the region's economies modernize their energy, telecommunications, transport, and public-service infrastructure, cybersecurity needs to be incorporated into those investments from the outset.
There are encouraging signs, with countries across the region strengthening national cybersecurity strategies, regulatory frameworks, and digital resilience programs. Kenya has taken steps to address emerging threats, including SIM-swap fraud and scam calls, while greater cooperation among Computer Emergency Response Teams is improving information sharing and coordinated responses. Businesses also have a crucial role to play in securing the region's digital economy, by building security into their investments from the beginning and collaborating to share threat intelligence.
Protecting the digital economy today will determine how confidently East Africa can build its economy of tomorrow. The region's digital opportunity remains substantial, but it must be built on trust. For businesses, cybersecurity should be viewed not simply as a cost of operating in a digital economy, but as an investment in continuity, customer confidence, and long-term growth. The more connected East Africa becomes, the more important it will be to ensure that the systems powering that connectivity are secure.
Key points
- East Africa's digital economy is growing rapidly, but it also poses significant cybersecurity risks that must be addressed to ensure economic growth and stability.
- Cybersecurity is no longer just a technical issue, but a business continuity, economic resilience, and consumer trust issue that requires a collaborative approach.
- Artificial intelligence is adding a new dimension to the cybersecurity challenge, with cybercriminals using AI to make attacks more convincing and easier to scale.
